Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft
File:                     FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft (raw, json)
Hash identifier:          +2l+CC38Vc6zggcPlu4wKQkLMiyajTo95hd8FbHTS3g=
Subject key identifier:   3A:E5:E9:64:59:85:F0:9C:31:09:4C:ED:21:F5:0E:A2:67:AA:8C:F8
Authority key identifier: FE:FE:D5:72:32:6D:21:BF:FB:D7:33:CF:A0:CC:79:09:DC:EC:50:6E
Certificate issuer:       /CN=FEFED572326D21BFFBD733CFA0CC7909DCEC506E
Certificate serial:       32CF556B7B024C65C66EB95819408CFC0A1B2960
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft
Manifest number:          0164
Signing time:             Fri 31 Jan 2025 12:08:09 +0000
Manifest this update:     Fri 31 Jan 2025 12:03:09 +0000
Manifest next update:     Sat 01 Feb 2025 14:04:09 +0000
Files and hashes:         1: FEFED572326D21BFFBD733CFA0CC7909DCEC506E.crl (hash: qwVFY3fTalEfPI7pDcIJGv7LSk/XWkHJnsykB581wgA=)
                          2: 323830343a353533343a3a2f33322d3438203d3e20323638363936.roa (hash: 7sryI+8DuK4GbvXNpKah2ckHWzv7jMCK04AhX8Y/F9E=)
                          3: 34352e3136352e3234342e302f32322d3234203d3e20323638363936.roa (hash: DIbmUeE7K1T6Z+QDl25xPwXZ+5ZxXqILs/h/gviwyUw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cf:55:6b:7b:02:4c:65:c6:6e:b9:58:19:40:8c:fc:0a:1b:29:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFED572326D21BFFBD733CFA0CC7909DCEC506E
        Validity
            Not Before: Jan 31 12:03:09 2025 GMT
            Not After : Feb  1 14:04:09 2025 GMT
        Subject: CN=3AE5E9645985F09C31094CED21F50EA267AA8CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:cb:db:a7:12:8b:ba:9d:2b:74:06:e6:bd:
                    df:09:99:a4:f4:b1:0a:90:9a:29:cd:df:40:eb:1f:
                    7c:f9:da:da:39:7b:5e:ae:48:44:67:c5:3f:32:cd:
                    5c:e0:a1:14:92:cb:f0:16:c0:61:fd:40:b7:2d:a9:
                    13:2d:c5:2f:27:ce:85:56:68:d8:01:ed:e8:4c:fe:
                    4c:2e:45:1f:d7:34:32:6f:cd:00:85:46:88:7b:b7:
                    7e:7b:f8:13:80:5b:54:63:f8:30:90:6b:a9:db:d5:
                    11:dc:15:7e:b0:4c:3f:fc:e0:53:60:fd:a4:21:06:
                    b4:56:bf:70:88:0b:ed:b5:42:21:56:01:d5:61:6a:
                    9d:a0:d1:a8:16:41:ef:47:e9:e6:81:2a:77:ad:56:
                    c1:d3:96:30:10:50:28:81:43:2c:fb:eb:6e:b1:5c:
                    9b:01:3e:cd:d8:d1:16:7e:b6:76:90:ec:e1:9c:89:
                    70:94:74:0c:96:ef:a8:2b:0f:24:9d:95:eb:bf:cb:
                    23:25:d2:9c:29:a6:ae:5a:38:90:3f:6b:1f:89:fc:
                    43:ba:12:ba:26:bb:11:3a:57:fc:5a:f2:b4:63:c6:
                    8d:84:10:62:7a:08:b7:00:1b:15:e8:14:b1:cf:4d:
                    52:0c:f3:37:4f:a9:35:e5:b0:ca:b0:fe:d1:fa:e4:
                    4d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E5:E9:64:59:85:F0:9C:31:09:4C:ED:21:F5:0E:A2:67:AA:8C:F8
            X509v3 Authority Key Identifier:
                keyid:FE:FE:D5:72:32:6D:21:BF:FB:D7:33:CF:A0:CC:79:09:DC:EC:50:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ad:86:d3:7e:4c:25:ec:13:f8:1b:2f:55:ef:87:96:35:70:
         2a:11:80:4c:d2:92:65:cc:f4:7b:dc:d9:5c:b9:d3:fa:0f:88:
         44:d2:53:dd:de:ba:c9:a7:15:55:fd:23:b7:45:28:a9:b3:c1:
         fc:6d:b6:82:fc:79:a6:96:11:1b:b0:d4:d8:87:a6:53:06:d1:
         37:b0:1a:45:6b:bb:11:cc:80:7b:3e:27:c7:86:d2:1a:4e:e4:
         d2:2f:ed:69:74:7d:3e:d1:ff:5d:68:9b:db:fe:2c:9d:a7:73:
         df:55:75:51:10:4a:15:95:e2:3d:ae:15:d4:3c:71:38:45:f5:
         dd:78:f0:af:d5:31:c8:e8:cc:88:0f:9b:4e:35:d7:b4:7c:5b:
         dc:b2:a7:cd:c6:c8:23:83:db:97:2a:1c:e7:c4:6a:ae:e0:0e:
         f7:2c:8c:5d:bc:03:42:4c:f8:34:93:43:fa:1f:29:e6:cd:47:
         50:16:a1:46:6a:67:fd:d5:b7:a9:d0:c5:a4:d3:de:39:2c:45:
         06:a3:cc:05:50:15:be:53:ea:03:35:ee:c2:e5:94:9e:1e:e0:
         95:63:d4:ef:c0:6a:0b:ee:2d:c1:86:67:58:3a:94:5f:97:16:
         3b:68:b8:a9:df:6a:98:9e:6d:99:96:80:7d:00:d7:cc:10:05:
         ac:d9:29:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:20:41 2025 by rpki-client